PCr/CN2004/001028 

i^tlfS K^Htt 2 S MAR 2805 

A Method for Transferring User Position Identifier 

Field of the Technology 

The present invention relates to communication techniques, more particularly to 
a method for transferring user position identifier. 

5 Background of the Invention 

The traditional Digital Subscriber Line Access Multiplexer (DSLAM) is a device 
with complete Asynchronous Transfer Mode (ATM) framework, i.e. it is an ATM- 
based DSLAM. In an ATM DSLAM network construction, the model of "ATM 
DSLAM + ATM switching network + Broadband Access Server (BAS)" is generally 

10 adopted, a Virtual Path Identifier (VPl) is used for representing a DSLAM office 
direction, and a Virtual Channel Identifier (VPI) is used for representing users 
governed by each DSLAM. Because a device number of DSLAM is identified by the 
VPI, the BAS device can rapidly and accurately locate a user in broadband 
maintenance management. Meanwhile, because ATM devices take charge in 

15 scheduling and managing Virtual Path (VP), configuration of the ATM devices is 
simple and easily managed. 

Being one of protocols in the Ethernet protocol group, IEEE802.1Q standard is 
for Virtual Local Area Network (VLAN), and it mainly defines the procedure of 
realizing different local networks virtually in a local network by adopting VLAN 

20 technology. When the DSLAM is used as an access device, it can provide two 
identifying modes, which are port-based VLAN and 802.1Q-based VLAN on the 
broadband access network. The port-based VLAN identifying mode is setting default 
VLAN ID of port according to the DSLAM device, and for the 802.1Q-based VLAN 
identifying mode, since the user carries its own VLAN ID, the user can set effective 

25 ports for the carried VLAN ID. 



The IEEE802.1Q standard defines Ethernet message format for encapsulating 
VLAN ID, and the format is shown in Table 1: 



DstMAC 


SrcMAC 


Etype 


802.1QTag 


Etype 


DATA 


FCS 



Table 1 
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Here, the 4-bytes DstMAC field is destination Media Access Control (MAC) 
address; the 4-bytes SrcMAC field is source MAC address; the 2-bytes Etype field is 
used to identify type of the Ethernet identifier and its constant value is 0x8100; the 2- 
bytes 802.1Otag field is tag of 802.1Q and the VLAN ID is identified by last 12 bits 
5 of this field; the 2-bytes Etype field is used to identify type of posterior DATA field; 
the DATA field is filled with the data region bom by the Ethernet and it contains 46- 
1500 bytes; the FEC field is used as the checking field and is 4 bytes long. 

The broadband access network is generally composed of three layers, including 
BAS device layer, convergence layer and broadband access device layer. Generally, 
10 the broadband access device is responsible for converging user's flow and service, 
and the user being converged may also carry private VLAN information. The switch 
in the convergence layer manages further convergence of the user's flow, and the 
BAS device accomplishes processing such as authentication, management and 
charging etc. upon access users. 

15 Figure 1 is a schematic diagram illustrating the procedure of broadband access 

network transmitting user position information in the prior art. In current broadband 
network construction, the Virtual Local Area Network Identifier (VLAN ID) 
encapsulation format specified in the IEEE 802. IQ standard is mainly adopted to map 
the information of port or Permanent Virtual Channel (PVC) that user accesses one by 

20 one to the 802.1Q-based Ethernet message which is for encapsulating VLAN ID, and 
send the position information of this user to the BAS device through the VLAN ID 
bom by the data message itself. When finishing the user authentication, the BAS 
device locates the user's position, device number of the accessed DSLAM and the 
port of this accessed DSLAM device via the identifier of BAS device, number of 

25 single board slots and ports in the BAS device that the broadband access device 
connects with and the VLAN ID within the user data message. By using this 
technique, related value added services can be carried out, such as binding an access 
account number of user with the user's position, implementing the access of dedicated 
line subscriber, etc. 

30 Figure 2 is a schematic diagram illustrating the procedure of broadband access 

device transmitting user position information in the prior art. The broadband access 
device in this scheme is an IP DSLAM device, user adopts ADSL access mode, and 
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pre-configures the corresponding relationship between port position information 
through which the user accesses the ADSL (i.e. number of slots and ports and PVC 
information), and the VLAN ID. After the user data message is imported to the user 
access port, it is processed by interface devices and forms an Ethernet message 
5 thereafter. Here, the processing comprises a set of procedures such as ATM message 
reforming and self-study for Ethernet address, etc. During the procedure of importing 
the user data message to the user access port, the access devices will insert a TAG 
header in conformity with the encapsulation format of 802. IQ into the processed 
Ethernet message according to the input port information and the PVC information of 
10 user. Correspondingly, according to the relationship between the VLAN ID and the 
port information of user and PVC information, the access device forwards the 
Ethernet message which is transmitted from the network side and is fit for 802.10, 
removes the TAG header encapsulated in terms of 802. IQ format and generates ATM 
cells on ADSL line by means of cell partition. 

15 However, the above scheme has the following problems: 

1) The user is identified via the VLAN ID carried by data message itself, and 
according to 802.10 protocol, there can only be 4096 VLAN IDs at most in one BAS 
device. If there exists a convergent device between 2-layer network devices and 3- 
layer network devices, the number of users gathered together by the convergence 

20 layer devices is sometimes more than 4K (4096). And because BAS devices are 
located in the higher layer of network, convergence devices are usually adopted 
between broadband access devices and BAS devices for convergence. 

2) Even in the direct connecting network structure of broadband access devices 
and BAS devices, with the increasing scale of single-node broadband access devices, 

25 connection modes such as cascading mode are introduced in the broadband access 
devices to access the network for the sake of saving direct connecting optical fibers, 
and thus it may occur that more than 4096 users access the network and the problem 
of having insufficient VLAN ID still exists. 

Summary of the Invention 

30 In view of the above, the present invention is to provide a method for 

transferring user position identifler so as to transfer any number of definite user 
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position information in the current network structure and solve the problem of having 
insufficient VLAN ID, and thereby, related value added services are realized. 

The technical scheme of the present invention is implemented as follows: 

A method for transferring user position identifier, which is applicable for a 
5 broadband network composed of broadband access server device layer, convergence 
layer and broadband access device layer, the method comprises: 

a. setting a tag for each broadband access device and for each non-cascading 
access port in the broadband access device, respectively; 

b. deciding whether the port receiving message in the broadband access device is 
10 a cascading port and if yes, directly transferring the message received on the port, or 

otherwise, inserting the tag set in step a into the message transmitted through this port 
in a fixed encapsulation format and transferring this message; 

c. after broadband access server (BAS) receiving the message transferred in step 
b, implementing user identification according to the tag having been inserted into the 

15 message and performing associated processing. 

Preferably, the insertion in step b comprises: the broadband access device 
independently inserting the tag set in step a into the received message, or the 
broadband access device and a convergence layer device together being employed to 
insert the tag set in step a into the received message. 

20 Preferably, the associated processing in step c comprises: 

cl. reforming the received message and deciding whether the message is a data 
message or a control message, and if it is a data message, execute step c2, and if it is a 
control message, execute step c3; 

c2. removing the tag from the data message, checking binding relationship 
25 between the tag in the data message and the IP address of user, performing security 
checking, and transferring the qualified data message being checked; 

c3. after implementing an authentication to the user, checking binding 
relationship between the user's account and physical access position according to the 
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tag carried in the control message, performing user quantity control, and sending the 
tag, the user account and password to an AAA server for processing authentication. 

Preferably, in step a, the tag set for the broadband access device is a VLAN Path 
Identifier (VlanPI) tag, the tag set for non-cascading access port in the broadband 
5 access device is a VLAN Channel Identifier (VlanCI) tag, and the message is an 
Ethernet message. 

Preferably, the fixed encapsulation format in step b comprises: sequentially 
encapsulating destination Media Access Control (MAC) address, source MAC 
address, type of Ethernet VlanPI tag, VlanPI, type of Ethernet VlanCI tag, VlanCI, 
10 type of data message, data being transmitted, and checking field. 

Preferably, in step b the broadband access device comprises an IP DSLAM 
device, or an Ethernet switch, or a Cable Modem Termination System (CMTS) device 
using Hybrid Fiber Coax (HFC) system. 

Preferably, when the broadband access device in step b is an IP DSLAM device 
15 composed of main control board, user interface board and backboard, said inserting 
the VlanPI and the VlanCI in step b further comprises: 

The user interface board inserting the VlanCI tag into the received Ethernet 
message and the main control board inserting the VlanPI tag into the received 
Ethernet message, 

20 or, the user interface board inserting the VlanCI tag and the VlanPI tag into the 

received Ethernet message, and the main control board directly transferring this 
message according to the VlanPI tag and the destination MAC address in the Ethernet 

message, 

or, the user interface board inserting the VlanCI tag into the received Ethernet 
25 message, the main control board directly transferring this message according to the 
VlanCI tag and the destination MAC address in the Ethernet message, a convergence 
layer device inserting the VlanPI tag of the device from which the message is 
transmitted into the received Ethernet message without a VlanPI tag, and transferring 
the message according to this VlanPI tag and the destination MAC address in the 
30 Ethernet message. 
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Preferably, the user in step c is a general user or a user with a private tag of 
internal network. 

Preferably, when the user with inserted tag is a user with private tag of internal 
network, in step b, information of the private tag of internal network is encapsulated 
5 in the VlanCI tag. 

In the present invention, two tags, which are VLAN Circuit Identifier (VlanCI) 
and VLAN Path Identifier (VlanPI), are used to identify users accessing the 
bandwidth access network, so that the amount of users allowed to access the 
broadband access network is increased and the problem of having insufficient VLAN 

10 ID is solved, thus the number of users allowed to access the broadband access 
network is not restricted. When performing the present invention, devices in the 
broadband access network need only do VlanPI scheduling during the message 
transmission, without caring about the details of user services, i.e. devices in the 
broadband access network carry out the management in thick path manner rather than 

15 in thin path manner, and the features associated with user services are solved by the 
cooperation of broadband access devices and BAS devices. Meanwhile, for the 
multicast services, less bandwidth for convergence devices will be occupied because 
the convergence device does not deal with any details of user service. In addition, 
private tag information in the internal network of users is transferred transparently 

20 through the whole network, and the device in the broadband access network will not 
perform any processing on this information. 

Brief Description of the Dravyings 

Figure 1 is a schematic diagram illustrating the procedure of broadband access 
network transmitting user position information in the prior art; 

25 Figure 2 is a schematic diagram illustrating the procedure of broadband access 

device transmitting user position information in the prior art; 

Figure 3 is a schematic diagram illustrating the procedure of user position 
transmission by using multi-layer tags in the present invention; 

Figure 4 is a flowchart of the present invention illustrating the processing 
30 procedure of broadband access device inserting multi-layer tags; 
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Figure 5 is a flowchart of the present invention illustrating the procedure of BAS 
device processing Ethernet message with multi-layer tags. 

Embodiments of the Invention 

The present invention will be described in detail hereinafter with reference to the 
5 accompanying drawings and specific embodiments. 

In the present invention, multi-layer tags are employed to identify user positions 
in the broadband access network, thus any number of user position identifiers can be 
transferred in the broadband network. 

In an embodiment of the invention, two tags, i.e. VLAN Circuit Identifier 
(VlanCI) and VLAN Path Identifier (VlanPI), are introduced to the broadband access 
network. The VlanCI is like the VCI in ATM network, which is used to identify a 
non-cascading port of broadband access device; the VlanPI is like the VPI in ATM 
network, which is used to identify an independent broadband access device or a 
cascading device. In this way, physical access position of a user in the broadband 
access device can be located according to the VlanCI and the VlanPI. 



According to 802. IQ standard, the Ethernet message format defined in the 
present embodiment for encapsulating VLAN ID is shown in Table 2: 



DstMAC 


SrcMAC 


Etype 


VlanPI 


Etype 


VlanCI 


Etype 


DATA 


PCS 



Table 2 



Here, the 4-bytes DstMAC field is destination MAC address; the 4-bytes 
SrcMAC field is source MAC address; the 2-bytes Etype field is used to identify type 
of the Ethernet VLAN Path identifier and its constant value is 0x8100; the VlanPI is 
set as the 2-bytes Tag field defined in the 802.1Q and the VLAN ID of last 12 bits is 
VlanPI; the Etype field is used to identify type of the Ethernet VlanCI, and it applies 
idle fields other than 0x8100 which can be of any bytes. Generally, 2-bytes is 
occupied when considering the consistence with the preceding one. The VlanCI is set 
as the 2-bytes Tag field defined in the 802.1Q and the VLAN ID of last 12-bits is 
VlanCI. The Etype field used to identify type of posterior DATA field is of 2-bytes; 
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the DATA field is data field bom by the Ethernet and it contains 46-1500 bytes; the 
FCS field is used as the checking field and is 4 bytes long. 

Figure 3 is a schematic diagram illustrating the procedure of user position 
transmission by using multi-layer tags in the embodiment. If it is a general user who 
5 accesses the broadband access device, a VlanCI tag and a VlanPI tag will be inserted 
into the Ethernet message complying with 802.1Q standard transmitted by the user; if 
it is a user with private tag of the internal network who accesses the broadband access 
device, a VlanCI tag and a VlanPI tag will be inserted into the Ethernet message 
complying with 802.1Q standard transmitted by this user, and the private tag is 

10 encapsulated into the VlanCI tag. If a cascading device is associated to the broadband 
access device, no tag will be inserted into the Ethernet message complying with 
802. IQ standard transmitted by the cascading device. Because a cascading device is 
composed of one or more broadband access devices, which is equal to the 
combination of a plurality of user access devices, corresponding tags have already 

15 been inserted into Ethernet messages transmitted by the cascading device at the first 
time when the user is connected. The convergence layer device in the broadband 
access network singly identifies the VlanPI tag and processes services related to that 
tag only. It does no process to the VlanCI tag and the private tag of the user. The BAS 
device in the broadband access network processes the VlanCI tag and the VlanPI tag 

20 for the purpose of identifying the unique user position message, and no process will 
be given to the private tag of the user, i.e. the BAS device knows through which 
broadband access device the user is connected according to the VlanPI tag, and 
through which port of this broadband access device the user is connected according to 
the VlanCI tag. 

25 In the present embodiment, an IP DSLAM device is used as the broadband 

access device, and the broadband access device can also be an Ethernet switch or a 
Cable Modem Termination System (CMTS) applying Hybrid Fiber Coax (HFC) 
system. The IP DSLAM device is generally composed of main control board, user 
interface board and backboard, the user accesses through the user interface board. 

30 After performing flow conversion and convergence, the flow is transferred by the 
relay module in the main control board. The corresponding relationship between 
information of port accessed by user, PVC information, and the VLAN ID has been 
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configured in the IP DSLAM device beforehand, so has cascading ports specially used 
for accessing cascading devices in the IP DSLAM device. Methods for inserting 
multi-layer tags are presented in the following three schemes. 

Scheme One: the insertion of multi-layer tags is fulfilled by the user interface 
5 board and the main control board in the IP DSLAM device together. As to the general 
user and user with private tag of internal network, the user interface board inserts the 
VlanCI tag into the Ethernet message transmitted by the user, where the private tag of 
internal network is encapsulated in the VlanCI tag, and the main control board inserts 
the VlanPI tag into the Ethernet message transmitted by the user. As to the cascading 
10 device accessing through the cascading port, the user interface board and the main 
control board do not insert any tag into the transmitted Ethernet message. 

Scheme Two: the insertion of multi-layer tags is achieved by the user interface 
board in the IP DSLAM device. As to the general user and user with private tag of 
internal network, the user interface board inserts the VlanCI tag and the VlanPI tag 
15 into the Ethernet message transmitted by the user, where the private tag of internal 
network is encapsulated in the VlanCI tag, and the main control board directly 
transfers the message according to the VlanPI tag and the destination MAC address in 
the Ethernet message. As to the cascading device accessing through the cascading port, 
the user interface board does not insert any tag into the transmitted Ethernet message. 

20 Scheme Three: the insertion of multi-layer tags is accomplished by the user 

interface board in IP DSLAM device and the device in convergence layer together. As 
to the general user and user with private tag of internal network, the user interface 
board inserts the VlanCI tag and the VlanPI tag into the Ethernet message transmitted 
by these users, where the private tag of internal network is encapsulated in the VlanCI 

25 tag, and the main control board directly transfers the message according to the VlanPI 
tag and the destination MAC address in the Ethernet message. As to the cascading 
device accessed through the cascading port, the user interface board does not insert 
any tag into the transmitted Ethernet message. After receiving the Ethernet message 
without any VlanPI tag, devices in the convergence layer firstly insert the VlanPI tag 

30 of the device from which the message is transmitted into the Ethernet message, and 
then transfer the Ethernet message according to this VlanPI tag and the destination 
MAC address in the message. 
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Figure 4 is a flowchart of the embodiment illustrating the processing procedure 
of broadband access device inserting multi-layer tags. 

Step 401: Process input message, e.g. reforming the message and so on; 

Step 402: The broadband access device identifies port information through which 
5 user message accesses; 

Step 403: It is decided by the broadband access device whether the transmitted 
data message is accessed through cascading port or not, and if yes, execute step 406; 
otherwise, execute step 404; 

Step 404: Insert the VlanCI tag which has been preconfigured by the broadband 
10 access device into the Ethernet message, and the total length of the tag is 2 bytes; 

Step 405: According to the VlanPI preconfigured by the broadband access device, 
a VlanPI tag is inserted into the Ethernet message, and the total length of the tag is 2 
bytes; 

Step 406: No tag is added; 

15 Step 407: The broadband access device transfers and outputs the processed 

Ethernet message according to the destination MAC address in that Ethernet message. 

Figure 5 is a flowchart of the embodiment illustrating the procedure of BAS 
device processing Ethernet message with multi-layer tags. 

Step 501: Process input message, e.g. reforming the message and so on; 

20 Step 502: Determine whether the message is a data message or a control message 

according to protocol number of the input message, and if it is a data message, 
execute step 503; if it is a control message, execute step 506; 

Step 503: Remove the VlanCI tag and the VlanPI tag out of the data message; 

Step 504: Check the binding relationship of the user IP address with the VlanCI 
25 tag and/or the VlanPI tag in the data message, and perform various security checking; 
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Step 505: Transfer and output the qualified data message being checked, and end 
the above procedure; 

Step 506: Execute an authentication to the user; 

Step 507: Check the user's account and physical access position for their binding 
5 relationship according to the VlanCI tag and the VlanPI tag carried in the control 
message, and perform user quantity control; 

Step 508: Send the VlanCI tag and the VlanPI tag as well as the user account and 
password to an Authentication Authorization and Accounting (AAA) Server, such as 
a RADIUS (Remote Authentication Dial-In User Service) Server, for processing 
10 authentication, and end the above procedure. 

The above descriptions are all for uplink services. The process of downlink 
services is similar to that of uplink services, after processing the message received 
from upper layer device, the BAS device in the broadband access network adds an 
Ethernet message header, a VlanPI tag and a VlanCI tag for the corresponding 
15 message, and transfers the message. When the broadband access device receives the 
Ethernet message sent by the BAS device, it will remove the VlanPI tag and the 
VlanCI tag in the message, and transfer the DATA information left to the user. 

The above description is just a preferable embodiment of the present invention, 
and the protection scope of the invention is not confined thereof. It will be understood 
20 that various changes in forms and details within the spirit and principle of the 
invention, are not beyond the protection scope of this invention. 
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